Description
In webERP 4.15, the Import Bank Transactions function fails to sanitize the content of imported MT940 bank statement files, resulting in the execution of arbitrary SQL queries, aka SQL Injection.
Unscored
CVE-2019-7755
EUVD-2019-17283GHSA-7px5-w3gv-ffcm
In webERP 4.15, the Import Bank Transactions function fails to sanitize the content of imported MT940 bank statement files, resulting in th…
Published Mar 30, 2020 · Updated Aug 4, 2024 · Assigned by mitre